| At this stage,the microprocessor protection device generally adopts the IEC 61850 standard in the network of the station control layer,and uses MMS to transmit information in civilized text.However,with the concept of a strong smart grid and the ubiquitous power Internet of Things,the network security faced with the IEC 61850 standard have become increasingly prominent.The IEC 62351-3 standard recommends that the TLS / SSL protocol be used directly at the transport layer to solve the security problem of MMS messages.However,the TLS / SSL protocol has a high communication complexity,and the PKI(public key infrastructure)cannot be automatically authenticated.Therefore,it is of great significance to research and design a communication module of a microprocessor protection device that can communicate safely.The main work is as follows: study the object-oriented modeling technology of IEC 61850 standard and the mapping relationship between MMS messages and IEC 61850 model,study the IEC 62351 standard and TLS / SSL security layer transmission protocol,and study the symmetric encryption involved in the protocol Algorithm AES,asymmetric encryption algorithm RSA,signature algorithm MD5.According to the current status of identity authentication and encrypted communication about microprocessor protection device,design the Three-layer-PKI protocol and IED-TLS / SSL protocol,and design the identity authentication module and encrypted communication module of the microprocessor protection device according to the protocol.By designing the automatic RA layer for the identity authentication module of the microprocessor protection device,the microprocessor protection device can realize the automatic registration function,reducing the need for certificate authentication personnel and audit personnel.The encryption communication module of the computer protection device improves the TLS / SSL handshake protocol,simplifies the cipher cluster in the TLS / SSL protocol,and improves the random number exchange algorithm.By doubling encrypts the key negotiation,reduce the communication module of the computer protection device Calculation performance requirements.The theoretical analysis of the security and practicability of the algorithm.Taking the transformer back protection device as an example,the IEC 61850 standard is combined with an improved safety communication module.The communication module of the microprocessor protection device is designed and implemented.And build the server environment,establish the IEC 61850 model of the protection device,write the SCL document,generate the static model,and add the identity authentication module and the encryption communication module.Use Open SSL to establish a private CA center,establish an automatic RA layer,and perform encrypted communication simulation experiments on the communication data of the microprocessor protection device in the server environment.The experimental results show that the improved microprocessor protection device communication module meets the requirements of automatic registration and the security requirements of data confidentiality,integrity,availability and non-repudiation. |
